Resilience is not a maturity level you reach. It is a claim you can either back up or you can’t; and knowing which of those is true is at the heart of the board’s responsibilities says Mathieu Rigotto.
Feature
Understanding the extent of exposure before an incident happens is one of the most important – and still too often overlooked – parts of cyber resilience.
Laura Czajkowski looks at the growing regulatory demands surrounding mandatory exit strategies, exploring how open-source infrastructure can help organizations avoid vendor lock-in and regain control of their data.
Every board wants to know whether its cyber security spend is delivering a good return on investment. It is a reasonable question, but too often organizations try to answer it using the wrong metric: whether a breach occurred.
The instinct among leadership teams has been to move fast on policy. Having documented policies on AI implementation and usage is great, however, it fails to address the main problem associated with the technology: too many organizations simply don’t know what AI is running, right now, across the organization.
World models, AI systems that model how real-world environments change, are expected to be one of the next steps in AI developments.
When a security breach erupts into a full-blown crisis, the post-incident review rarely asks which tool missed the warning sign first. Rather, the focus is usually on the human reaction: who made the call, on what information, and why.
Business continuity is no longer about having an internal plan; it is having a plan that reflects how the organization really works.
Building stronger cyber security means bringing more perspectives, experiences, and ways of thinking into the teams responsible for anticipating risk.
Larry Marks argues that AI should now be recognised as an operational dependency requiring the same operational resilience planning applied to other important business services.